00494FC7 |. 80BB 15820200>
cmp
byte ptr ds:[ebx+28215], 0C7
00494FCE |. 76 22 jbe short 00494FF2
00494FD0 |. 8D45 FC lea eax, dword ptr ss:[ebp-4] ; 我输入的假号
00494FD3 |. 50 push eax
00494FD4 |. 8D55 B8 lea edx, dword ptr ss:[ebp-48]
00494FD7 |. 8B83 04850200 mov eax, dword ptr ds:[ebx+28504] ; 机器码
00494FDD |. E8 3638F7FF call 00408818
00494FE2 |. 8B4D B8 mov ecx, dword ptr ss:[ebp-48]
00494FE5 |. 8B93 E4840200 mov edx, dword ptr ds:[ebx+284E4]
00494FEB |. 8BC3 mov eax, ebx
00494FED |. E8 B6010000 call 004951A8
00494FF2 |> 8D55 B4 lea edx, dword ptr ss:[ebp-4C]
00494FF5 |. 8B83 98030000 mov eax, dword ptr ds:[ebx+398]
00494FFB |. E8 B8A9F9FF call 0042F9B8
00495000 |. 8B45 B4 mov eax, dword ptr ss:[ebp-4C] ; [COLOR=
"red"
]eax is addr of 我输入的注册码[
/COLOR
]
00495003 |. 8B55 FC mov edx, dword ptr ss:[ebp-4] ; [COLOR=
"red"
]edx is addr of 真正的注册码[
/COLOR
]
00495006 |. E8 7DEEF6FF call 00403E88 ; [COLOR=
"Red"
]比较我输入的注册码和软件真正的注册码是否相同[
/COLOR
]
[COLOR=
"Red"
]0049500B |. 75 22 jnz short 0049502F ; <=====关键跳[
/COLOR
]
0049500D |. 33C0 xor eax, eax
0049500F |. 8983 10850200 mov dword ptr ds:[ebx+28510], eax
00495015 |. 6A 00 push 0
00495017 |. B9 F4504900 mov ecx, 004950F4 ; 提示
0049501C |. BA 7C514900 mov edx, 0049517C ; 现在可阅读全部目录了!
00495021 |. A1 800A4A00 mov eax, dword ptr ds:[4A0A80]
00495026 |. 8B00 mov eax, dword ptr ds:[eax]
00495028 |. E8 C38EFBFF call 0044DEF0
0049502D |. EB 18 jmp short 00495047
0049502F |> 6A 00 push 0
00495031 |. B9 F4504900 mov ecx, 004950F4 ; 提示
00495036 |. BA 94514900 mov edx, 00495194 ; 阅读文书密码错误!
0049503B |. A1 800A4A00 mov eax, dword ptr ds:[4A0A80]